invisible Dhcp server

Hi,
I have a rogue dhcp server on the network and can not find it.With wireshark i found an ip and mac address, i can not ping the ip or connect to it. When i look on the cisco switch the mac adress is on a port connected to the proxmox server. On this port i have 4 mac addresses, 2 of vm's and 2 i do not know.
I checked, they are not vm mac addresses, i checked all the vm nics.
I also checked in linux with ip -a. and to no avail.
Is it possible the is some hidden server? Or dhcp service on the proxmox linux?

Staff Member

Not by default, but packages are available in the repositories. You can use the PVE firewall to filter out the unwanted MAC addresses. There are also MAC lookups online, so you might be able to get the vendor, if it helps.

I found the problem, shut down the virtial servers one by one and while shutting down one of the servers the other two mac addresse where gone as well.
Now i will try to find out what kind of software was installed on this server, no windows dhcp.
regards.

Quick Navigation

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick support. 13,000+ satisfied customers have Proxmox subscriptions. Get your own in 60 seconds.